Privacy Notice

1. Who we are

Manzilo Holding LTD is incorporated in the Abu Dhabi Global Market under company number 38644, with registered office at Al Khatem Tower, ADGM Square, Abu Dhabi, United Arab Emirates. Our Data Protection Officer can be contacted at support@manzilo.com.

2. Personal Data we collect

We collect the following categories of Personal Data:

• Identity and contact data — full name, Emirates ID number or passport reference, phone number, email, WhatsApp identifier, employer or PM Company affiliation.
• Account data — login credentials, security questions, authentication tokens, IP address, device identifiers.
• Tenancy and property data — building and unit references, tenancy contract details, Ejari registration references, service history.
• Communications data — the content and metadata of messages sent through the Platform (including WhatsApp), calls, and emails.
• Financial data — rent amounts, payment references, and, where applicable, bank account details.
• Technical data — log data, usage patterns, cookies and similar identifiers.
• Location data — property address and, where the Platform is used through a mobile device with location enabled, approximate location.

3. Legal bases for processing

We rely on the following legal bases under the PDPL:

• Your consent, expressed at registration and, where required, at specific processing steps.
• Performance of the contract between you and Manzilo, or steps taken at your request before entering that contract.
• Compliance with a legal obligation to which Manzilo is subject.
• Legitimate interests pursued by Manzilo or a third party, provided such interests are not overridden by your rights and freedoms.
• Protection of vital interests, in exceptional situations such as life-safety events at a property.

4. Purposes of processing

• Providing the Platform and Services, including AI-based triage, vendor dispatch, tenancy service management, and reporting.
• Verifying identity and preventing fraud.
• Communicating with you about the Services, including operational notifications.
• Processing rent, deposit, and vendor payments where authorised.
• Improving and training our models, using data that has been de-identified or aggregated wherever operationally feasible.
• Complying with UAE law, court orders, and regulator requests.
• Enforcing our Terms and defending legal claims.

5. Disclosures

We may disclose your Personal Data to:

• PM Companies and Landlords, where you are a Tenant or Vendor and disclosure is necessary to deliver the tenancy service.
• Vendors engaged to fulfil service requests on the Platform.
• Sub-processors engaged by Manzilo for hosting, communications, payment processing, and analytics, each bound by contractual data protection obligations.
• Government authorities and regulators where required by UAE law, including RERA, DLD, ADGM, and law enforcement.
• Professional advisers, in confidence.
• Acquirers or successors in connection with a corporate transaction.

6. International transfers

Some of our sub-processors are located outside the UAE. Where Personal Data is transferred outside the UAE, we do so in accordance with Article 22 of the PDPL, ensuring an adequate level of protection through appropriate safeguards such as standard contractual clauses, adequacy determinations issued by the UAE Data Office, or your explicit consent.

7. Retention

We retain Personal Data only for as long as necessary for the purposes described above, unless a longer retention period is required by UAE law. Indicative retention periods:

8. Your rights

Under the PDPL you have the right to:

• Access the Personal Data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of data no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
• Restrict processing in certain circumstances.
• Object to processing based on legitimate interests or direct marketing.
• Request data portability where processing is based on consent or contract and carried out by automated means.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.
• Lodge a complaint with the UAE Data Office.

To exercise any of these rights, contact support@manzilo.com. We will respond within 30 days of a verified request.

9. Security

We implement appropriate technical and organisational measures to protect Personal Data, including encryption in transit and at rest, access control, logging, and periodic security testing. In the event of a Personal Data breach that is likely to result in a high risk to the rights and freedoms of natural persons, we will notify the UAE Data Office and affected Users in accordance with the PDPL.

10. Children

The Platform is not directed to children under 18. We do not knowingly collect Personal Data from children. Where we become aware that a child has provided Personal Data, we will delete it without undue delay.

11. Changes to this Notice

We may update this Notice from time to time. Material changes will be notified through the Platform or by email. The current version is available at all times on the Platform.